Practice question 73 of 498 · medium
A team runs vulnerability tests only on release day and often discovers architectural authorization defects too late. Which process improvement is most appropriate?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Embed threat modeling and security requirements early, then validate through build, release, and runtime
Embed threat modeling and security requirements early, then validate through build, release, and runtime: This integrates security throughout delivery rather than only at the end. Move all security decisions to the final production approval meeting: That retains the late discovery problem. Treat successful compilation as proof of safe authorization: Compilation does not validate application access boundaries. Remove developers from remediation ownership: DevSecOps requires development engagement and accountable fixes.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.